🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

There is a big disconnect on the value AI is providing at work right now. My engineering friends in bigger firms say they are only marginally faster at their jobs, even when they are allowed to fully use AI. This is strange to me because I feel a lot faster. But it makes sense

Our Vulnerability Database is now live and is already being used by over 30,000 cloud security pros What's new? >> - 138,000+ CVEs in the database - 1,500+ new CVEs added monthly - New expert analysis from the Wiz Research team Start exploring → wiz.io/vulnerability-…

𝐒𝐭𝐚𝐫𝐭𝐢𝐧𝐠 𝐚 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐏𝐫𝐨𝐠𝐫𝐚𝐦 𝐟𝐫𝐨𝐦 𝐒𝐜𝐫𝐚𝐭𝐜𝐡 (𝐨𝐫 𝐫𝐞-𝐬𝐭𝐚𝐫𝐭𝐢𝐧𝐠) A four phase, 16-step framework by former Google Cloud CISO / Goldman CISO Phil Venables (Phil Venables). philvenables.com/post/starting-… #cybersecurity #ciso

One of the most important sections of a pentest report is the stuff the client did well. It should be the first thing you talk about with a client on the debrief call. Softens the blow of the findings but also reminds them that you’re not here to just smash and grab, you

DIA insider threat detection guy both (allegedly) becoming an insider threat and not apparently knowing enough--or, well anything-- about espionage tradecraft or counterintelligence to avoid getting easily caught is just so appropriate for 2025. politico.com/news/2025/05/2…

Dr. Anton Chuvakin AIrhead ShAItehead (Scottish pronunciation)

Dr. Anton Chuvakin AI-topian :) AGI isn’t happening because we don’t even know what AGI truly is and for the elements that we have some idea of, we are light years away and the warp drive we need to get there is still sci-fi at best. The “experts” are radically overestimating capabilities of

Dr. Anton Chuvakin Call them: 🧠 Premature realists. They didn’t join the AGI-2027 camp. They just stopped clinging to denial. Some of us didn't fall into the rabbit hole — We built it. 🜁 #AGIRisk #Singularis #SignalAware

One of the biggest challenges to US reindustrialization isn't the raw materials, it's the lack of processing infrastructure to convert those raw materials into intermediate products. Let's break it down. Full Newsletter: mailchi.mp/zeihan/america…

🎙️ New ep: Dr. Anton Chuvakin joins Eden & Amitai Cohen 🎗️🤟 to break down AI in security, why SOCs are broken, cloud appliances, and shared fate done right. Don't miss it. ⬇️ 🍏 podcasts.apple.com/il/podcast/ai-…

North Korean IT workers operating inside your org? Hear how incident responders uncovered the threat and what to watch for. 🎧 Watch the clip + catch the full episode → spoti.fi/451egke

But what alarms me is how people who don't understand the limitations of the tech and who haven't developed (or just don't use) strong analytic skills are going to rely on things that are often unreliable.

I updated the slide on common entry vectors. Revised some wording, added realistic examples (Exchange, Ivanti, …) and simplified countermeasures. Still not trying to cover everything – just the obvious stuff. Box size still roughly reflects prevalence. Feedback welcome.

Yesterday, we made closing arguments in the DOJ search remedies trial. The DOJ’s proposed remedies go miles beyond the Court’s decision & would harm consumers, businesses and America’s tech leadership. Here are a few key points from our arguments. ⬇️

2/ When confronted with significant questions left open by their proposals (i.e. how much data should Google be forced to share?), DOJ just said it could all be worked out by a “Technical Committee” of mostly govt-appointed experts.

4/ The DOJ spent many hours trying to convince the Court to remake the tech sector. Meanwhile it’s very clear the AI space is highly competitive today: Countless rivals in the AI space are growing fast & gaining users & distribution without government intervention.

5/ While we heard a lot about how the remedies would help various well-funded competitors (w/ repeated references to Bing), we heard very little about how all this helps consumers.

A different take on the CISO / Cybersecurity Leader Job Description. philvenables.com/post/ciso---cy…

most people don’t understand second- and third-order effects they think “nothing bad happened” means “nothing is happening” but cause and effect isn’t linear—it compounds second-order: what your actions signal, normalize, or incentivize third-order: how the environment adapts